General
- Target x86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455.exe
- Size 12.0MB
- Sample260707-wf796abs2v
- SHA256 86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455
- MD5 ae957c6cc7605201f4f4617a302d4aac
- SHA1 e87c81ea9799a6f38dd05dacb0abd6c78b47308d
- SHA512 b3eee07558b3675aaebe2564c3d1dc786345d1f478ea6e965d5e992985a40c17c039831368cab11425e7f50ae1093b89277ee768049d668349fcc6b2e07d47db
- SSDEEP 49152:mRpK6fWxZHGQAulw19JRgfFC3b7HJFlwNwrH6PfLsdRyzVeAXH1SX8wRanDyBZOj:MKkWvw1rGtCfHur4EbRyPo4yrEpO/
- TLSH T1CDC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
x86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
x86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target x86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455.exe
- Size 12.0MB
- SHA256 86b208d46c46c1a1473b5ae7df3f9bfe48b671259239df24574555c295aad455
- MD5 ae957c6cc7605201f4f4617a302d4aac
- SHA1 e87c81ea9799a6f38dd05dacb0abd6c78b47308d
- SHA512 b3eee07558b3675aaebe2564c3d1dc786345d1f478ea6e965d5e992985a40c17c039831368cab11425e7f50ae1093b89277ee768049d668349fcc6b2e07d47db
- SSDEEP 49152:mRpK6fWxZHGQAulw19JRgfFC3b7HJFlwNwrH6PfLsdRyzVeAXH1SX8wRanDyBZOj:MKkWvw1rGtCfHur4EbRyPo4yrEpO/
- TLSH T1CDC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting